[ol7_latest_archive] gnutls-utils-3.3.26-9.0.1.el7.aarch64

Name:	gnutls-utils
Version:	3.3.26
Release:	9.0.1.el7
Architecture:	aarch64
Group:	Applications/System
Size:	1315504
License:	GPLv3+
RPM:	gnutls-utils-3.3.26-9.0.1.el7.aarch64.rpm
Source RPM:	gnutls-3.3.26-9.0.1.el7.src.rpm
Build Date:	Sun May 06 2018
Build Host:	ca-buildarm01.us.oracle.com
Vendor:	Oracle America
URL:	http://www.gnutls.org/
Summary:	Command line tools for TLS protocol
Description:	GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.

Changelog (Show File list) (Show related packages)

Fri Feb 02 2018 Ilya Okomin <ilya.okomin@oracle.com> 3.3.26-9.0.1

- Include ECDSA KAT into selftests for FIPS140-2 compliance [Orabug 27484156]

Fri May 26 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9

- Address crash in OCSP status request extension, by eliminating the
  unneeded parsing (CVE-2017-7507, #1455828)

Wed Apr 26 2017 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7

- Address interoperability issue with 3.5.x (#1388932)
- Reject CAs which are both trusted and blacklisted in trust module (#1375303)
- Added new functions to set issuer and subject ID in certificates (#1378373)
- Reject connections with less than 1024-bit DH parameters (#1335931)
- Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
- Mention limitations of certtool in manpage (#1375463)
- Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
- Do not link directly to trousers but instead use dlopen (#1379739)
- Fix incorrect OCSP validation (#1377569)
- Added support for pin-value in PKCS#11 URIs (#1379283)
- Added the --id option to p11tool (#1399232)
- Improved sanity checks in RSA key generation (#1444780)
- Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
  CVE-2017-7869

Tue Jul 12 2016 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1

- Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
- Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
- When writing certificates to smart cards write the CKA_ISSUER and
  CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
- Use the shared system certificate store (#1110750)
- Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
  CVE-2015-7575)
- Allow hashing data over 2^32 bytes (#1306953)
- Ensure written PKCS#11 public keys are not marked as private (#1339453)
- Ensure secure_getenv() is called on all uses of environment variables
  (#1344591).
- Fix issues related to PKCS #11 private key listing on certain HSMs
  (#1351389)

Fri Jun 05 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13

- Corrected reseed and respect of max_number_of_bits_per_request in 
  FIPS140-2 mode. Also enhanced the initial tests. (#1228199)

Mon Jan 05 2015 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-12
```
- corrected fix of handshake buffer resets (#1153106)
```

Thu Dec 11 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11

- Applied fix for urandom FD in FIPS140 mode (#1165047)
- Applied fix for FIPS140-2 related regression (#1110696)

Tue Dec 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-10

- Amended fix for urandom FD to avoid regression in FIPS140 mode (#1165047)

Tue Nov 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9

- Amended fix for FIPS enforcement issue (#1163848)
- Fixed issue with applications that close all file descriptors (#1165047)

Thu Nov 13 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-8

- Applied fix for FIPS enforcement issue when only /etc/system-fips
  existed (#1163848)

Fri Nov 07 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-7
```
- Applied fix for CVE-2014-8564 (#1161473)
```
Wed Oct 29 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-6
```
- when generating test DH keys, enforce the q_bits.
```

Tue Oct 21 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-5

- do not enforce FIPS140-2 policies in non-FIPS140 mode (#1154774)

Thu Oct 16 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4

- reverted change to use the p11-kit certificate storage (#1110750)
- added functions to test DH/ECDH in FIPS-140-2 mode and fixed
  RSA key generation (#1110696)
- added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7
- fixed SHA224 in SSSE3 optimized code
- fixed issue with handshake buffer resets (#1153106)
- fixed issue in RSA key generation with specific seeds in FIPS140-2 mode

Wed Oct 01 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-3
```
- added dependency on libtasn1 3.8 (#1110696)
```
Thu Sep 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-2
```
- disabled padlock CPU support in FIPS140-2 mode
```
Thu Sep 18 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1
```
- updated to latest stable release
```

Fri Sep 05 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-1.b2

- updated with latest bug fixes for 3.3.x branch
- delete bundled files

Thu Sep 04 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8b1-1
```
- updated with latest bug fixes for 3.3.x branch
```

Fri Aug 22 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1

- new upstream release (#1110696)
- allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)

Fri Aug 15 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7b1-1

- updated with latest bug fixes for 3.3.x branch
- utilize the p11-kit trust store (#1110750)

Tue Jul 29 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-2
```
- correct path of fipscheck links
```
Wed Jul 23 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.6-1
```
- rebased to 3.3.6 and enabled fips mode (#1110696)
```

Wed May 28 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-9

- fix session ID length check (#1102027)
- fixes null pointer dereference (#1101727)

Tue Feb 25 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-8
```
- fixes CVE-2014-0092 (#1071815)
```
Fri Feb 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-7
```
- fixes CVE-2014-1959
```
Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 3.1.18-6
```
- Mass rebuild 2014-01-24
```
Tue Jan 14 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-5
```
- Fixed issue with gnutls.info not being available (#1053487)
```
Tue Jan 14 2014 Tomáš Mráz <tmraz@redhat.com> 3.1.18-4
```
- build the crywrap tool
```
Thu Jan 02 2014 Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.1.18-3
```
- fixes crash in gnutls_global_deinit (#1047037)
```
Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 3.1.18-2
```
- Mass rebuild 2013-12-27
```

Mon Dec 23 2013 Nikos Mavrogiannopoulos <nmav@redhat.com> 3.1.18-1

- new upstream release (#1040886)
- Use the correct root key for unbound

Tue Nov 05 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.16-1

- new upstream release
- fixes CVE-2013-4466 off-by-one in dane_query_tlsa()

Tue Oct 29 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.15-1

- new upstream release
- fixes CVE-2013-4466 buffer overflow in handling DANE entries

Mon Jul 15 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.13-1
```
- new upstream release
```
Thu May 23 2013 Tomáš Mráz <tmraz@redhat.com> 3.1.11-1
```
- new upstream release
- enable ECC NIST Suite B curves
```

Mon Mar 25 2013 Tomas Mraz <tmraz@redhat.com> 3.1.10-1

- new upstream release
- license of the library is back to LGPLv2.1+

Fri Mar 15 2013 Tomas Mraz <tmraz@redhat.com> 3.1.9-1
```
- new upstream release
```
Thu Mar 07 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-3
```
- drop the temporary old library
```
Tue Feb 26 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-2
```
- don't send ECC algos as supported (#913797)
```
Thu Feb 21 2013 Tomas Mraz <tmraz@redhat.com> 3.1.8-1
```
- new upstream version
```

Wed Feb 06 2013 Tomas Mraz <tmraz@redhat.com> 3.1.7-1

- new upstream version, requires rebuild of dependencies
- this release temporarily includes old compatibility .so

Tue Feb 05 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-2

- rebuilt with new libtasn1
- make guile bindings optional - breaks i686 build and there is
  no dependent package

Tue Jan 08 2013 Tomas Mraz <tmraz@redhat.com> 2.12.22-1
```
- new upstream version
```

Wed Nov 28 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-2

- use RSA bit sizes supported by libgcrypt in FIPS mode for security
  levels (#879643)

Fri Nov 09 2012 Tomas Mraz <tmraz@redhat.com> 2.12.21-1
```
- new upstream version
```

Thu Nov 01 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-4

- negotiate only FIPS approved algorithms in the FIPS mode (#871826)

Wed Aug 08 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-3

- fix the gnutls-cli-debug manpage - patch by Peter Schiffer

Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.20-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
```
Mon Jun 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.20-1
```
- new upstream version
```
Fri May 18 2012 Tomas Mraz <tmraz@redhat.com> 2.12.19-1
```
- new upstream version
```
Thu Mar 29 2012 Tomas Mraz <tmraz@redhat.com> 2.12.18-1
```
- new upstream version
```

Thu Mar 08 2012 Tomas Mraz <tmraz@redhat.com> 2.12.17-1

- new upstream version
- fix leaks in key generation (#796302)

Fri Feb 03 2012 Kevin Fenzi <kevin@scrye.com> - 2.12.14-3
```
- Disable largefile on arm arch. (#787287)
```
Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.12.14-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
```
Tue Nov 08 2011 Tomas Mraz <tmraz@redhat.com> 2.12.14-1
```
- new upstream version
```
Mon Oct 24 2011 Tomas Mraz <tmraz@redhat.com> 2.12.12-1
```
- new upstream version
```
Thu Sep 29 2011 Tomas Mraz <tmraz@redhat.com> 2.12.11-1
```
- new upstream version
```
Fri Aug 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.9-1
```
- new upstream version
```
Tue Aug 16 2011 Tomas Mraz <tmraz@redhat.com> 2.12.8-1
```
- new upstream version
```

Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-2

- fix problem when using new libgcrypt
- split libgnutlsxx to a subpackage (#455146)
- drop libgnutls-openssl (#460310)

Tue Jun 21 2011 Tomas Mraz <tmraz@redhat.com> 2.12.7-1
```
- new upstream version
```
Mon May 09 2011 Tomas Mraz <tmraz@redhat.com> 2.12.4-1
```
- new upstream version
```
Tue Apr 26 2011 Tomas Mraz <tmraz@redhat.com> 2.12.3-1
```
- new upstream version
```
Mon Apr 18 2011 Tomas Mraz <tmraz@redhat.com> 2.12.2-1
```
- new upstream version
```
Thu Mar 03 2011 Tomas Mraz <tmraz@redhat.com> 2.10.5-1
```
- new upstream version
```
Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.4-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
```
Wed Dec 08 2010 Tomas Mraz <tmraz@redhat.com> 2.10.4-1
```
- new upstream version
```
Thu Dec 02 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-2
```
- fix buffer overflow in gnutls-serv (#659259)
```
Fri Nov 19 2010 Tomas Mraz <tmraz@redhat.com> 2.10.3-1
```
- new upstream version
```
Thu Sep 30 2010 Tomas Mraz <tmraz@redhat.com> 2.10.2-1
```
- new upstream version
```
Wed Sep 29 2010 jkeating - 2.10.1-4
```
- Rebuilt for gcc bug 634757
```

Thu Sep 23 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-3

- more patching for internal errors regression (#629858)
  patch by Vivek Dasmohapatra

Tue Sep 21 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-2

- backported patch from upstream git hopefully fixing internal errors
  (#629858)

Wed Aug 04 2010 Tomas Mraz <tmraz@redhat.com> 2.10.1-1
```
- new upstream version
```

Wed Jun 02 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-2

- add support for safe renegotiation CVE-2009-3555 (#533125)

Wed May 12 2010 Tomas Mraz <tmraz@redhat.com> 2.8.6-1
```
- upgrade to a new upstream version
```
Mon Feb 15 2010 Rex Dieter <rdieter@fedoraproject.org> 2.8.5-4
```
- FTBFS gnutls-2.8.5-3.fc13: ImplicitDSOLinking (#564624)
```

Thu Jan 28 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-3

- drop superfluous rpath from binaries
- do not call autoreconf during build
- specify the license on utils subpackage

Mon Jan 18 2010 Tomas Mraz <tmraz@redhat.com> 2.8.5-2
```
- do not create static libraries (#556052)
```
Mon Nov 02 2009 Tomas Mraz <tmraz@redhat.com> 2.8.5-1
```
- upgrade to a new upstream version
```
Wed Sep 23 2009 Tomas Mraz <tmraz@redhat.com> 2.8.4-1
```
- upgrade to a new upstream version
```
Fri Aug 14 2009 Tomas Mraz <tmraz@redhat.com> 2.8.3-1
```
- upgrade to a new upstream version
```
Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.8.1-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
```
Wed Jun 10 2009 Tomas Mraz <tmraz@redhat.com> 2.8.1-1
```
- upgrade to a new upstream version
```
Wed Jun 03 2009 Tomas Mraz <tmraz@redhat.com> 2.8.0-1
```
- upgrade to a new upstream version
```
Mon May 04 2009 Tomas Mraz <tmraz@redhat.com> 2.6.6-1
```
- upgrade to a new upstream version - security fixes
```

Tue Apr 14 2009 Tomas Mraz <tmraz@redhat.com> 2.6.5-1

- upgrade to a new upstream version, minor bugfixes only

Fri Mar 06 2009 Tomas Mraz <tmraz@redhat.com> 2.6.4-1
```
- upgrade to a new upstream version
```
Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.6.3-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
```
Mon Dec 15 2008 Tomas Mraz <tmraz@redhat.com> 2.6.3-1
```
- upgrade to a new upstream version
```
Thu Dec 04 2008 Tomas Mraz <tmraz@redhat.com> 2.6.2-1
```
- upgrade to a new upstream version
```

Tue Nov 11 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-3

- fix chain verification issue CVE-2008-4989 (#470079)

Thu Sep 25 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-2

- add guile subpackage (#463735)
- force new libtool through autoreconf to drop unnecessary rpaths

Tue Sep 23 2008 Tomas Mraz <tmraz@redhat.com> 2.4.2-1
```
- new upstream version
```

Tue Jul 01 2008 Tomas Mraz <tmraz@redhat.com> 2.4.1-1

- new upstream version
- correct the license tag
- explicit --with-included-opencdk not needed
- use external lzo library, internal not included anymore

Tue Jun 24 2008 Tomas Mraz <tmraz@redhat.com> 2.4.0-1
```
- upgrade to latest upstream
```

Tue May 20 2008 Tomas Mraz <tmraz@redhat.com> 2.0.4-3

- fix three security issues in gnutls handshake - GNUTLS-SA-2008-1
  (#447461, #447462, #447463)

Mon Feb 04 2008 Joe Orton <jorton@redhat.com> 2.0.4-2
```
- use system libtasn1
```
Tue Dec 04 2007 Tomas Mraz <tmraz@redhat.com> 2.0.4-1
```
- upgrade to latest upstream
```
Tue Aug 21 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-2
```
- license tag fix
```
Wed Jun 06 2007 Tomas Mraz <tmraz@redhat.com> 1.6.3-1
```
- upgrade to latest upstream (#232445)
```

Tue Apr 10 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-2

- properly require install-info (patch by Ville Skyttä)
- standard buildroot and use dist tag
- add COPYING and README to doc

Wed Feb 07 2007 Tomas Mraz <tmraz@redhat.com> 1.4.5-1

- new upstream version
- drop libtermcap-devel from buildrequires

Thu Sep 14 2006 Tomas Mraz <tmraz@redhat.com> 1.4.1-2

- detect forged signatures - CVE-2006-4790 (#206411), patch
  from upstream

Tue Jul 18 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.1-1
```
- upgrade to new upstream version, only minor changes
```
Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.4.0-1.1
```
- rebuild
```

Wed Jun 14 2006 Tomas Mraz <tmraz@redhat.com> - 1.4.0-1

- upgrade to new upstream version (#192070), rebuild
  of dependent packages required

Tue May 16 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-2
```
- added missing buildrequires
```
Mon Feb 13 2006 Tomas Mraz <tmraz@redhat.com> - 1.2.10-1
```
- updated to new version (fixes CVE-2006-0645)
```
Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.2
```
- bump again for double-long bug on ppc(64)
```
Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.2.9-3.1
```
- rebuilt for new gcc4.1 snapshot and glibc changes
```
Tue Jan 03 2006 Jesse Keating <jkeating@redhat.com> 1.2.9-3
```
- rebuilt
```

Fri Dec 09 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-2

- replaced *-config scripts with calls to pkg-config to
  solve multilib conflicts

Wed Nov 23 2005 Tomas Mraz <tmraz@redhat.com> 1.2.9-1

- upgrade to newest upstream
- removed .la files (#172635)

Sun Aug 07 2005 Tomas Mraz <tmraz@redhat.com> 1.2.6-1

- upgrade to newest upstream (rebuild of dependencies necessary)

Mon Jul 04 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-2
```
- split the command line tools to utils subpackage
```
Sat Apr 30 2005 Tomas Mraz <tmraz@redhat.com> 1.0.25-1
```
- new upstream version fixes potential DOS attack
```
Sat Apr 23 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-2
```
- readd the version script dropped by upstream
```

Fri Apr 22 2005 Tomas Mraz <tmraz@redhat.com> 1.0.24-1

- update to the latest upstream version on the 1.0 branch

Wed Mar 02 2005 Warren Togami <wtogami@redhat.com> 1.0.20-6
```
- gcc4 rebuild
```
Tue Jan 04 2005 Ivana Varekova <varekova@redhat.com> 1.0.20-5
```
- add gnutls Requires zlib-devel (#144069)
```
Mon Nov 08 2004 Colin Walters <walters@redhat.com> 1.0.20-4
```
- Make gnutls-devel Require libgcrypt-devel
```
Tue Sep 21 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-3
```
- rebuild with release++, otherwise unchanged.
```
Tue Sep 07 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-2
```
- patent tainted SRP code removed.
```

Sun Sep 05 2004 Jeff Johnson <jbj@redhat.com> 1.0.20-1

- update to 1.0.20.
- add --with-included-opencdk --with-included-libtasn1
- add --with-included-libcfg --with-included-lzo
- add --disable-srp-authentication.
- do "make check" after build.

Fri Mar 21 2003 Jeff Johnson <jbj@redhat.com> 0.9.2-1
```
- upgrade to 0.9.2
```
Tue Jun 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.4-1
```
- update to 0.4.4.
```
Fri Jun 21 2002 Tim Powers <timp@redhat.com>
```
- automated rebuild
```
Sat May 25 2002 Jeff Johnson <jbj@redhat.com> 0.4.3-1
```
- update to 0.4.3.
```

Tue May 21 2002 Jeff Johnson <jbj@redhat.com> 0.4.2-1

- update to 0.4.2.
- change license to LGPL.
- include splint annotations patch.

Tue Apr 02 2002 Nalin Dahyabhai <nalin@redhat.com> 0.4.0-1
```
- update to 0.4.0
```
Thu Jan 17 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.2-1
```
- update to 0.3.2
```
Thu Jan 10 2002 Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1
```
- add a URL
```
Thu Dec 20 2001 Nalin Dahyabhai <nalin@redhat.com>
```
- initial package
```